sabnzbdplus - Debian Package Tracker

general

source: sabnzbdplus (contrib)
version: 5.1.1+dfsg-1
maintainer: Jeroen Ploemen (DMD)
arch: all
std-ver: 4.7.4
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 3.1.1+dfsg-2+deb11u1
oldstable: 3.7.1+dfsg-2
old-bpo: 4.5.0+dfsg-1~bpo12+1
stable: 4.5.0+dfsg-1
stable-sec: 4.5.0+dfsg-1+deb13u1
stable-bpo: 5.0.4+dfsg-1~bpo13+1
testing: 5.0.4+dfsg-1
unstable: 5.1.1+dfsg-1

versioned links

3.1.1+dfsg-2+deb11u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.7.1+dfsg-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.5.0+dfsg-1~bpo12+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.5.0+dfsg-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
4.5.0+dfsg-1+deb13u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.0.4+dfsg-1~bpo13+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.0.4+dfsg-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
5.1.1+dfsg-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

sabnzbdplus (2 bugs: 0, 1, 1, 0)

action needed

Marked for autoremoval on 05 September due to httpcore, ipywidgets, node-playwright, node-vscode-lsp, node-yarnpkg, towncrier: #1135849, #1138720, #1141793, #1143321, #1143428, #1144575, #1144608 high

Version 5.0.4+dfsg-1 of sabnzbdplus is marked for autoremoval from testing on Sat 05 Sep 2026. It depends (transitively) on httpcore, ipywidgets, node-playwright, node-vscode-lsp, node-yarnpkg, towncrier, affected by #1135849, #1138720, #1141793, #1143321, #1143428, #1144575, #1144608. You should try to prevent the removal by fixing these RC bugs.

Created: 2026-08-01 Last update: 2026-08-24 03:04

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

TEMP-1144839-91D17B:

Created: 2026-08-19 Last update: 2026-08-20 21:20

1 security issue in forky high

There is 1 open security issue in forky.

1 important issue:

TEMP-1144839-91D17B:

Created: 2026-08-19 Last update: 2026-08-20 21:20

2 security issues in bullseye high

There are 2 open security issues in bullseye.

1 important issue:

TEMP-1144839-91D17B:

1 issue postponed or untriaged:

CVE-2023-34237: (needs triaging) SABnzbd is an open source automated Usenet download tool. A design flaw was discovered in SABnzbd that could allow remote code execution. Manipulating the Parameters setting in the Notification Script functionality allows code execution with the privileges of the SABnzbd process. Exploiting the vulnerabilities requires access to the web interface. Remote exploitation is possible if users[exposed their setup to the internet or other untrusted networks without setting a username/password. By default SABnzbd is only accessible from `localhost`, with no authentication required for the web interface. This issue has been patched in commits `e3a722` and `422b4f` which have been included in the 4.0.2 release. Users are advised to upgrade. Users unable to upgrade should ensure that a username and password have been set if their instance is web accessible.

Created: 2026-08-19 Last update: 2026-08-20 21:20

2 security issues in bookworm high

There are 2 open security issues in bookworm.

1 important issue:

TEMP-1144839-91D17B:

1 issue postponed or untriaged:

CVE-2023-34237: (needs triaging) SABnzbd is an open source automated Usenet download tool. A design flaw was discovered in SABnzbd that could allow remote code execution. Manipulating the Parameters setting in the Notification Script functionality allows code execution with the privileges of the SABnzbd process. Exploiting the vulnerabilities requires access to the web interface. Remote exploitation is possible if users[exposed their setup to the internet or other untrusted networks without setting a username/password. By default SABnzbd is only accessible from `localhost`, with no authentication required for the web interface. This issue has been patched in commits `e3a722` and `422b4f` which have been included in the 4.0.2 release. Users are advised to upgrade. Users unable to upgrade should ensure that a username and password have been set if their instance is web accessible.

Created: 2026-08-19 Last update: 2026-08-20 21:20

2 bugs tagged patch in the BTS normal

The BTS contains patches fixing 2 bugs, consider including or untagging them.

Created: 2026-08-15 Last update: 2026-08-24 03:00

lintian reports 1 warning normal

Lintian reports 1 warning about this package. You should make the package lintian clean getting rid of them.

Created: 2026-06-12 Last update: 2026-06-12 14:30

debian/patches: 5 patches to forward upstream low

Among the 5 debian patches available in version 5.1.1+dfsg-1 of the package, we noticed the following issues:

5 patches where the metadata indicates that the patch has not yet been forwarded upstream. You should either forward the patch upstream or update the metadata to document its real status.

Created: 2023-02-26 Last update: 2026-08-19 08:31

testing migrations

This package is part of the ongoing testing transition known as auto-upperlimit-python3-sabctools. Please avoid uploads unrelated to this transition, they would likely delay it and require supplementary work from the release managers. On the other hand, if your package has problems preventing it to migrate to testing, please fix them as soon as possible. You can probably find supplementary information in the debian-release archives or in the corresponding release.debian.org bug.
excuses:
- Migrates after: sabctools
- Migration status for sabnzbdplus (5.0.4+dfsg-1 to 5.1.1+dfsg-1): Waiting for test results or another package, or too young (no action required now - check later)
- Issues preventing migration:
- ∙ ∙ Autopkgtest for sabnzbdplus/5.1.1+dfsg-1: amd64: Pass, arm64: Pass, armhf: Pass, i386: Pass, ppc64el: Pass, s390x: Test triggered
- ∙ ∙ Depends: sabnzbdplus sabctools
- Additional info (not blocking):
- ∙ ∙ Piuparts can't test sabnzbdplus (not a blocker) - (no link yet)
- ∙ ∙ 5 days old (needed 5 days)
- Not considered

news

[rss feed]

[2026-08-20] Accepted sabnzbdplus 4.5.0+dfsg-1+deb13u1 (source) into stable-security (Debian FTP Masters) (signed by: Jeroen Ploemen)
[2026-08-18] Accepted sabnzbdplus 5.1.1+dfsg-1 (source) into unstable (Jeroen Ploemen)
[2026-06-17] Accepted sabnzbdplus 5.0.4+dfsg-1~bpo13+1 (source) into stable-backports (Jeroen Ploemen)
[2026-06-17] sabnzbdplus 5.0.4+dfsg-1 MIGRATED to testing (Debian testing watch)
[2026-06-12] Accepted sabnzbdplus 5.0.4+dfsg-1 (source) into unstable (Jeroen Ploemen)
[2026-06-09] Accepted sabnzbdplus 5.0.3+dfsg-3 (source) into unstable (Jeroen Ploemen)
[2026-05-31] sabnzbdplus 5.0.3+dfsg-2 MIGRATED to testing (Debian testing watch)
[2026-05-28] Accepted sabnzbdplus 5.0.3+dfsg-1~bpo12+1 (source) into oldstable-backports-sloppy (Debian FTP Masters) (signed by: Jeroen Ploemen)
[2026-05-26] sabnzbdplus 5.0.3+dfsg-1 MIGRATED to testing (Debian testing watch)
[2026-05-25] Accepted sabnzbdplus 5.0.3+dfsg-2 (source) into unstable (Jeroen Ploemen)
[2026-05-25] Accepted sabnzbdplus 5.0.3+dfsg-1~bpo13+1 (source) into stable-backports (Jeroen Ploemen)
[2026-05-19] Accepted sabnzbdplus 5.0.3+dfsg-1 (source) into unstable (Jeroen Ploemen)
[2026-02-01] sabnzbdplus 4.5.4+dfsg-4 MIGRATED to testing (Debian testing watch)
[2026-01-27] Accepted sabnzbdplus 4.5.4+dfsg-4 (source) into unstable (Jeroen Ploemen)
[2026-01-08] Accepted sabnzbdplus 4.5.4+dfsg-3~bpo12+1 (source) into oldstable-backports-sloppy (Debian FTP Masters) (signed by: Jeroen Ploemen)
[2026-01-07] Accepted sabnzbdplus 4.5.4+dfsg-3~bpo13+1 (source) into stable-backports (Jeroen Ploemen)
[2026-01-07] sabnzbdplus 4.5.4+dfsg-3 MIGRATED to testing (Debian testing watch)
[2026-01-01] Accepted sabnzbdplus 4.5.4+dfsg-3 (source) into unstable (Jeroen Ploemen)
[2025-12-30] Accepted sabnzbdplus 4.5.4+dfsg-2 (source) into unstable (Jeroen Ploemen)
[2025-11-01] Accepted sabnzbdplus 4.5.4+dfsg-1~bpo12+1 (source) into oldstable-backports-sloppy (Debian FTP Masters) (signed by: Jeroen Ploemen)
[2025-10-30] Accepted sabnzbdplus 4.5.4+dfsg-1~bpo13+1 (source) into stable-backports (Jeroen Ploemen)
[2025-10-28] sabnzbdplus 4.5.4+dfsg-1 MIGRATED to testing (Debian testing watch)
[2025-10-23] Accepted sabnzbdplus 4.5.4+dfsg-1 (source) into unstable (Jeroen Ploemen)
[2025-09-14] Accepted sabnzbdplus 4.5.2+dfsg-1~bpo12+1 (source all) into oldstable-backports-sloppy (Debian FTP Masters) (signed by: Jeroen Ploemen)
[2025-08-26] Accepted sabnzbdplus 4.5.2+dfsg-1~bpo13+1 (source all) into stable-backports (Debian FTP Masters) (signed by: Jeroen Ploemen)
[2025-08-17] sabnzbdplus 4.5.2+dfsg-1 MIGRATED to testing (Debian testing watch)
[2025-08-10] Accepted sabnzbdplus 4.5.2+dfsg-1 (source) into unstable (Jeroen Ploemen)
[2025-04-07] Accepted sabnzbdplus 4.5.0+dfsg-1~bpo12+1 (source) into stable-backports (Jeroen Ploemen)
[2025-04-07] sabnzbdplus 4.5.0+dfsg-1 MIGRATED to testing (Debian testing watch)
[2025-04-02] Accepted sabnzbdplus 4.5.0+dfsg-1 (source) into unstable (Jeroen Ploemen)

bugs [bug history graph]

all: 3
RC: 1
I&N: 1
M&W: 1
F&P: 0
patch: 2

links

homepage
lintian (0, 1)
buildd: logs
popcon
browse source code
other distros
security tracker
screenshots
l10n (-, 87)
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 5.0.4+dfsg-1